Privacy Fine Tracker
Automated tracking of privacy enforcement actions worldwide. Data is collected from GDPR enforcement authorities, the FTC, state data broker registries, and privacy news sources.
Total Fines
698
Total Amount (USD)
$7.9B
Registered Data Brokers
1,000
Regulations
6
Fines by Regulation
View All →Top Fined Companies
View All →| # | Company | Total (USD) | Fines |
|---|---|---|---|
| 1 | data transfers from the EU/EEA to the US by Meta Platforms Ireland Limited for its Facebook service | $1.3B | 1 |
| 2 | Meta Platforms Ireland Limited | $1.2B | 3 |
| 3 | TikTok Technology Limited | $948.6M | 2 |
| 4 | Amazon Europe | $805.7M | 1 |
| 5 | LinkedIn Ireland Unlimited Company | $694.3M | 1 |
| 6 | WhatsApp Ireland Ltd | $513.5M | 2 |
| 7 | processing of personal data relating to child users of the Instagram social networking service | $421.0M | 1 |
| 8 | SOCIETE DEVELOPPANT PLUSIEURS SERVICES EN LIGNE | $381.0M | 1 |
| 9 | Uber | $313.8M | 2 |
| 10 | Meta Dataset | $258.3M | 1 |
Fines by Country
Search by Country →| Country | Total (USD) | Fines |
|---|---|---|
| Ireland | $5.3B | 37 |
| France | $1.2B | 268 |
| Luxembourg | $805.7M | 1 |
| Netherlands | $313.5M | 2 |
| United Kingdom | $164.7M | 350 |
| Germany | $48.6M | 1 |
| Italy | $21.6M | 2 |
| Poland | $15.9M | 3 |
| US | $5.4M | 3 |
Recent Fines
View All →Data Brokers by State
View All Brokers →CA
904 registered
OR
96 registered
Recent Privacy Headlines
View All →BleepingComputer · 10/13/2026
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. [...]
DataBreaches.net · 10/13/2026
Luis Monzon reports: Ampath Laboratories, one of South Africa’s largest pathology service providers, has been hit by a cyberattack, with the attacker claiming that more than 80 million patient records have been exfiltrated. Threat actor ByteToBreach, which has attacked other major entities across Africa, including major targets in Nigeria, claimed responsibility for the breach. The... Source
Fox News Tech · 10/13/2026
Hackers targeted Danfoss refrigerator controls across French supermarkets, forcing chains like Carrefour and Monoprix to discard massive food stocks.
BleepingComputer · 10/13/2026
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]
The Record · 10/13/2026
The new research, published by AI security startup AIR, found that a network filtering flaw in Vercel Sandbox — a tool used to run code in isolated environments — could allow agents to exploit certificate validation processes to transmit data outside approved networks.
SecurityWeek · 10/13/2026
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services. The post Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach appeared first on SecurityWeek .
The Record · 10/13/2026
North Korean hackers have been targeting Ukrainian experts in diplomacy, security and international policy amid Pyongyang’s growing military cooperation with Russia.
DataBreaches.net · 10/13/2026
UpGuard provides another entry for our “No need to hack when it’s leaking” files. This time, it’s Liberating Research. On August 31, Greg Pollock from UpGuard contacted DataBreaches.net to report a data leak they discovered containing sensitive medical information on almost 100,000 people. By agreement, we both delayed publication to give the responsible firm time... Source
DataBreaches.net · 10/13/2026
Back in the day, when my co-author and I would conduct training workshops on neurobehavioral disorders in children and teens, we would always introduce our presentation with an overhead that said, “Two Professionals. Three Opinions.” That remains true for so many controversial or contentious topics. This week, Marco A. De Felice of SuspectFile tackled questions... Source
EDPB News · 10/13/2026
Brussels, 13 October – During its latest plenary, the EDPB has adopted statement on smart glasses and published the report “The connected gaze. Video recording, surveillance and administering evidence in the age of smart glasses” *, developed in the context of the Support Pool of Expert (SPE) programme **. As smart glasses become widely available and more frequently used, they raise significant questions for the protection of individuals’ personal data and rights and freedoms even if they create new opportunities for communication, assistance, and innovation. “These devices look like ordinary glasses, but they include cameras and microphones and are connected to the internet. This raises serious privacy concerns, as individuals may be recorded without their knowledge. The risks are even greater in sensitive environments—such as hospitals, schools, or workplaces—and when recordings are shared on social networks. And of course, children are especially at risk when using these glasses or